Managing Vulnerabilities under the CRA: From Discovery to Disclosure
Vulnerability reporting already applies
Since 11 September 2026, manufacturers of products with digital elements must report actively exploited vulnerabilities and severe incidents, with an early warning within 24 hours. From December 2027, the full vulnerability handling requirements of the Cyber Resilience Act (CRA) apply throughout the support period. That calls for a process, not ad hoc firefighting. In this 1-hour lunchtime webinar, Sirris shows how to set up practical vulnerability management, from monitoring and coordinated disclosure to security updates and regulatory reporting.
For whom?
This webinar is aimed at manufacturers of products with digital elements, from software to connected machines, including:
- Software developers and tech leads responsible for patches and updates
- R&D and engineering teams at manufacturers of connected products and machines
- Product security and cybersecurity professionals who handle vulnerability reports
- Product managers who define the support period and update policy
- Quality and compliance managers who prepare regulatory reporting
Key insights
In 1 hour, you will discover:
- What the CRA requires for vulnerability handling and reporting
- How to monitor vulnerabilities in your products and their components
- How to set up coordinated vulnerability disclosure
- How to organise security updates and regulatory reporting throughout the support period
Flemish companies can take advantage of a subsidy from VLAIO for this course
This programme is part of Industriepartnershap in which 13 Flemish innovation partners offer an integrated service to stimulate growth and innovation in the Flemish industry in the 6 following themes: AI, Cybersecurity, Circularity, Digitisation, Climate & Energy and Industry 4.0. They do so under the leadership of Agoria and Sirris and with the support of Agentschap Innoveren & Ondernemen.
Date
Location
Price
Language
English

